Siemens RUGGEDCOM ROX Improper Privilege Management (CVE-2021-37173)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.14.1, RUGGEDCOM ROX RX1400 All versions V2.14.1, RUGGEDCOM ROX RX1500 All versions V2.14.1, RUGGEDCOM ROX RX1501 All versions V2.14.1, RUGGEDCOM ROX RX1510 All versions V2.14.1, RUGGEDCOM ROX RX1511 All versions V2.14.1,...

CVE-2021-37173

CVE-2021-37173 affects Siemens RUGGEDCOM ROX family (MX5000, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions prior to v2.14.1. The root cause is improper privilege management in the CLI, where file read/write operations are insufficiently restricted for l...